EKZ Infostealer Malware — Analysis, Campaigns & Threat Activity

Threat entity extracted from intelligence sources

Frequency
2
occurrences
First Seen
May 28, 2026
Last Seen
May 28, 2026

EKZ Infostealer is a malware family tracked across 1 threat cluster and 2 intelligence report mentions on ThreatCluster. First observed May 28, 2026; most recent activity May 28, 2026.

Related Threat Clusters

  • Critical RCE Vulnerabilities Discovered in Fortinet Products

    Fortinet has identified multiple critical vulnerabilities in its FortiSandbox and FortiAuthenticator products, which could allow unauthenticated attackers to execute arbitrary code remotely. The vulnerabilities are…

    92 articles · Updated May 12, 2026

Recent Intelligence Reports

  • Hackers exploit FortiClient EMS flaw to push infostealer malware — Bleepingcomputer · May 28, 2026
  • FortiClient EMS Exploited via CVE-2026-35616 for EKZ Infostealer Deployment — Technadu · May 28, 2026

Related Entities

Malware CVE-2026-35616 CWE-287 - Improper Authentication CWE-862 - Missing Authorization T1003 - OS Credential Dumping T1041 - Exfiltration Over C2 Channel T1059.001 - PowerShell T1059.003 - Windows Command Shell T1190 - Exploit Public-Facing Application T1567 - Exfiltration Over Web Service FortiClient FortiClient EMS

CVSS v3.1 Breakdown